Domain Detective

API Reference

Class

CertificateInventoryEndpointRisk

Namespace DomainDetective
Assembly DomainDetective
Modifiers sealed

Endpoint-level certificate risk details.

Inheritance

  • Object
  • CertificateInventoryEndpointRisk

Usage

This type appears in these public API surfaces even when no hand-authored example is attached directly to the page.

Returned or exposed by

Constructors

public CertificateInventoryEndpointRisk() #

Properties

public String Host { get; set; } #

Gets or sets the host value.

public Int32 Port { get; set; } #

Gets or sets the port value.

public String Service { get; set; } #

Gets or sets the service value.

public String CertificateThumbprint { get; set; } #

Gets or sets the certificate thumbprint value.

public String CertificateRootThumbprint { get; set; } #

Gets or sets the certificate root thumbprint value.

public String CertificateSerialNumber { get; set; } #

Gets or sets the certificate serial number value.

public String Issuer { get; set; } #

Gets or sets the issuer value.

public String RootIssuer { get; set; } #

Gets or sets the root issuer value.

public String AuthorityFamily { get; set; } #

Gets or sets the authority family value.

public String RootAuthorityFamily { get; set; } #

Gets or sets the root authority family value.

public Nullable<DateTimeOffset> NotBeforeUtc { get; set; } #

Certificate validity start timestamp in UTC from the observed endpoint certificate.

public Nullable<DateTimeOffset> NotAfterUtc { get; set; } #

Gets or sets the not after utc value.

public Nullable<Int32> DaysUntilValid { get; set; } #

Days until certificate validity start when NotYetValid is true; otherwise null.

public Nullable<Int32> DaysToExpire { get; set; } #

Gets or sets the days to expire value.

public Int32 Score { get; set; } #

Gets or sets the score value.

public String Severity { get; set; } #

Gets or sets the severity value.

public Boolean Valid { get; set; } #

Gets or sets the valid value.

public Boolean Expired { get; set; } #

Gets or sets the expired value.

public Boolean NotYetValid { get; set; } #

True when NotBeforeUtc is in the future at risk-evaluation time. This is derived from timestamps and does not rely on the persisted Valid flag.

public Boolean ChainComplete { get; set; } #

Gets or sets the chain complete value.

public Int32 ChainLength { get; set; } #

Gets or sets the chain length value.

public Int32 IntermediateCount { get; set; } #

Gets or sets the intermediate count value.

public Boolean HostnameMatch { get; set; } #

Gets or sets the hostname match value.

public Boolean IsReachable { get; set; } #

Gets or sets the is reachable value.

public Boolean IsSelfSigned { get; set; } #

Gets or sets the is self signed value.

public Boolean IsKnownCertificateAuthority { get; set; } #

Gets or sets the is known certificate authority value.

public Boolean IsKnownRootCertificateAuthority { get; set; } #

Gets or sets the is known root certificate authority value.

public Int32 CertificateReuseEndpointCount { get; set; } #

How many endpoints currently reuse the same certificate identity.

public Int32 CertificateReuseDistinctServiceCount { get; set; } #

How many distinct services currently reuse the same certificate identity.

public Int32 CertificateReuseDistinctPortCount { get; set; } #

How many distinct ports currently reuse the same certificate identity.

public Boolean AllowsServerAuthentication { get; set; } #

Gets or sets the allows server authentication value.

public Boolean AllowsClientAuthentication { get; set; } #

Gets or sets the allows client authentication value.

public Boolean AllowsSecureEmail { get; set; } #

Gets or sets the allows secure email value.

public String AuthenticationProfile { get; set; } #

Gets or sets the authentication profile value.

public String ChainSource { get; set; } #

Primary chain source observed for this endpoint certificate (for example tls-handshake).

public List<String> ChainSources { get; set; } #

Observed chain sources for this endpoint certificate (primary plus historical).

public List<String> CtDiscoverySources { get; set; } #

Observed CT/discovery sources (for example crt.sh, shodan, censys).

public List<String> CtTemplateFormatErrors { get; set; } #

Observed CT template/configuration errors.

public Boolean WeakKey { get; set; } #

Gets or sets the weak key value.

public Boolean Sha1Signature { get; set; } #

Gets or sets the sha1 signature value.

public Boolean PresentInCtLogs { get; set; } #

Gets or sets the present in ct logs value.

public List<String> Reasons { get; set; } #

Gets or sets the reasons value.

{{ include "footer" }}